Giyfi

Wireshark Lab 5: TCP

Raja Rajeswari Paruchuri

#244084

1. What is the IP address and TCP port number used by the client computer (source) that is transferring the file to gaia.cs.umass.edu? To answer this question, it’s probably easiest to select an HTTP message and explore the details of the TCP packet used to carry this HTTP message, using the “details of the selected packet header window” (refer to Figure 2 in the “Getting Started with Wireshark” Lab if you’re uncertain about the Wireshark windows.

Answer: The IP address for the host is 192.168.1.102 and the port number is 1161.

2. What is the IP address of gaia.cs.umass.edu? On what port number is it sending and receiving TCP segments for this connection?

Answer: The IP address of gaia.cs.umass.edu is 128.119.245.12 and the port number used for this connection is 80

3. What is the IP address and TCP port number used by your client computer (source) to transfer the file to gaia.cs.umass.edu?

Answer:

I did this packet capture on my PC.

From the above figure, my client computer’s IP address is 10.0.0.5 and the TCP port is 60834.

4. What is the sequence number of the TCP SYN segment that is used to initiate the TCP connection between the client computer and gaia.cs.umass.edu? What is it in the segment that identifies the segment as a SYN segment?

Answer: The sequence number of the TCP SYN segment is zero and the Syn flag is set to 1 which indicates that this segment is a SYN segment.

5. What is the sequence number of the SYNACK segment sent by gaia.cs.umass.edu to the client computer in reply to the SYN? What is the value of the Acknowledgement field in the SYNACK segment? How did gaia.cs.umass.edu determine that value? What is it in the segment that identifies the segment as a SYNACK segment?

Answer: (Results of packet captured in my PC)

According to the below figure, the sequence number of the SYNACK segment sent by gaia.cs.umass.edu to the client computer in...